boulder/ca
Jacob Hoffman-Andrews 692bd53ae5
ca: unsplit issuance flow (#8014)
Add a new RPC to the CA: `IssueCertificate` covers issuance of both the
precertificate and the final certificate. In between, it calls out to
the RA's new method `GetSCTs`.

The RA calls the new `CA.IssueCertificate` if the `UnsplitIssuance`
feature flag is true.

The RA had a metric that counted certificates by profile name and hash.
Since the RA doesn't receive a profile hash in the new flow, simply
record the total number of issuances.

Fixes https://github.com/letsencrypt/boulder/issues/7983
2025-02-24 11:37:17 -08:00
..
proto ca: unsplit issuance flow (#8014) 2025-02-24 11:37:17 -08:00
testdata Deprecate ECDSAForAll feature and remove ECDSAAllowList (#7560) 2024-06-26 10:38:51 -04:00
ca.go ca: unsplit issuance flow (#8014) 2025-02-24 11:37:17 -08:00
ca_test.go ca: unsplit issuance flow (#8014) 2025-02-24 11:37:17 -08:00
crl.go Fix reference bug in CA.noteSignError (#7534) 2024-06-07 15:34:02 -04:00
crl_test.go Better compile-time type checking for gRPC server implementations (#7504) 2024-05-28 09:26:29 -07:00
ocsp.go Fix reference bug in CA.noteSignError (#7534) 2024-06-07 15:34:02 -04:00
ocsp_test.go ca: unsplit issuance flow (#8014) 2025-02-24 11:37:17 -08:00